[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 28.927946] kauditd_printk_skb: 7 callbacks suppressed [ 28.927958] audit: type=1800 audit(1545553404.972:29): pid=5938 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 28.961679] audit: type=1800 audit(1545553404.972:30): pid=5938 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 42.418148] sshd (6079) used greatest stack depth: 15728 bytes left Warning: Permanently added '10.128.0.33' (ECDSA) to the list of known hosts. 2018/12/23 08:23:45 fuzzer started 2018/12/23 08:23:46 dialing manager at 10.128.0.26:33943 2018/12/23 08:23:47 syscalls: 1 2018/12/23 08:23:47 code coverage: enabled 2018/12/23 08:23:47 comparison tracing: enabled 2018/12/23 08:23:47 setuid sandbox: enabled 2018/12/23 08:23:47 namespace sandbox: enabled 2018/12/23 08:23:47 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/23 08:23:47 fault injection: enabled 2018/12/23 08:23:47 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/23 08:23:47 net packet injection: enabled 2018/12/23 08:23:47 net device setup: enabled 08:25:59 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 183.458907] IPVS: ftp: loaded support on port[0] = 21 08:25:59 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4) [ 183.742415] IPVS: ftp: loaded support on port[0] = 21 08:25:59 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() request_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000004c0)='\\selfnodev$\x00', 0xfffffffffffffffe) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) wait4(r0, 0x0, 0x0, 0x0) [ 184.126267] IPVS: ftp: loaded support on port[0] = 21 08:26:00 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x4, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000280)={0x0, 0x4000000000088, 0x0, 0x40, &(0x7f0000ffa000/0x4000)=nil, 0x10e15}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x1000, 0x0, 'client0\x00', 0x0, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x0, 0x33093e40}) userfaultfd(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000440)={'syz1'}, 0x1200e) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close(0xffffffffffffffff) write(r2, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) dup2(r3, r3) [ 184.500033] IPVS: ftp: loaded support on port[0] = 21 08:26:00 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f00000000c0)={0x18, 0x2f, 0x80010b, 0x0, 0x0, {0x4}, [@generic='L']}, 0x18}}, 0x0) [ 184.934556] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.949298] IPVS: ftp: loaded support on port[0] = 21 [ 184.965393] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.987085] device bridge_slave_0 entered promiscuous mode 08:26:01 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x8, 0x4, 0x4, 0x2a56, 0x0, 0x0}, 0x200) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), 0x0, 0x3}, 0x20) [ 185.188321] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.198299] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.216436] device bridge_slave_1 entered promiscuous mode [ 185.377942] IPVS: ftp: loaded support on port[0] = 21 [ 185.385802] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 185.511816] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 185.911753] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 186.056910] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 186.085505] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.103388] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.130245] device bridge_slave_0 entered promiscuous mode [ 186.287148] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.294239] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.302065] device bridge_slave_1 entered promiscuous mode [ 186.445421] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.468182] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.476093] device bridge_slave_0 entered promiscuous mode [ 186.485684] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 186.552823] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 186.578815] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.589874] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.606783] device bridge_slave_1 entered promiscuous mode [ 186.686265] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 186.694929] team0: Port device team_slave_0 added [ 186.715377] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 186.808277] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 186.836207] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 186.846537] team0: Port device team_slave_1 added [ 186.920328] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 186.979402] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.004461] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.015016] device bridge_slave_0 entered promiscuous mode [ 187.071553] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 187.088216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.136829] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.143220] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.157141] device bridge_slave_1 entered promiscuous mode [ 187.175503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.282760] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 187.298492] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 187.318936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.337603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.351317] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 187.427722] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.434268] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.442454] device bridge_slave_0 entered promiscuous mode [ 187.452873] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 187.469675] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 187.503916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.527467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.539041] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 187.573957] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.590637] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.598689] device bridge_slave_1 entered promiscuous mode [ 187.607830] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.614833] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.627501] device bridge_slave_0 entered promiscuous mode [ 187.681292] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 187.706044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.732287] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.755720] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.763354] device bridge_slave_1 entered promiscuous mode [ 187.773029] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 187.807766] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 187.823264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.865434] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 187.887346] team0: Port device team_slave_0 added [ 187.897700] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 187.912919] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 188.017717] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 188.029300] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 188.091375] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 188.115352] team0: Port device team_slave_1 added [ 188.181472] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 188.236944] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 188.259178] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.288002] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 188.295459] team0: Port device team_slave_0 added [ 188.373680] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 188.398884] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 188.421494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.440112] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 188.467347] team0: Port device team_slave_1 added [ 188.475440] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 188.486933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.519205] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 188.526646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.544074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.557493] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 188.569245] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 188.586160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.626616] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 188.633749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.644240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.679016] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 188.693944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.710423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.730410] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 188.776187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.789280] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 188.802132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.821590] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 188.839921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.855151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.916410] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 188.924027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.949315] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 188.965175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.986222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.029580] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 189.037286] team0: Port device team_slave_0 added [ 189.053898] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 189.084574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.116582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.163880] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 189.178915] team0: Port device team_slave_0 added [ 189.184258] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 189.193516] team0: Port device team_slave_1 added [ 189.202296] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.208821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.215815] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.222205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.250977] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 189.280899] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 189.296487] team0: Port device team_slave_1 added [ 189.328333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.363992] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 189.388521] team0: Port device team_slave_0 added [ 189.447563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.455102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.483666] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 189.504469] team0: Port device team_slave_1 added [ 189.517185] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 189.524039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.546486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.573766] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 189.602855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.614269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.655950] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 189.662847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.682624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.693608] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 189.712315] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 189.720113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.739811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.776345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.805193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.836104] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 189.846905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.868028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.901716] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 189.916220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.927931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.960486] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 189.968380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.983964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.026925] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 190.034069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.066231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.172414] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 190.180152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.205238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.287882] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.294266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.301485] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.307921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.338707] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 190.467152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.629701] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.636129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.642792] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.649227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.680692] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 191.245484] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.251961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.258666] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.265050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.273164] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 191.505786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.519724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 191.568464] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.574830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.581546] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.587950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.598396] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 191.614496] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.620918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.627647] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.634014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.670800] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 192.546098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.554701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.536885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.968509] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 195.431421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.441074] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 195.457090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.471342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.573298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.902296] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 195.986290] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.050812] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 196.376859] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 196.383031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.396926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.548658] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 196.554897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.563941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.726740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.812127] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.836719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.848082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.036215] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.283552] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 197.300024] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 197.324802] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 197.714507] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.729344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.744404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.772472] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.796219] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 197.802350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.846191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.853249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.875047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.206748] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.234022] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.285922] 8021q: adding VLAN 0 to HW filter on device team0 08:26:15 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/\"ro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) 08:26:15 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xf5) ioctl(r0, 0x1000008912, &(0x7f00000046c0)="0a5c2d023c126285718070") r1 = socket$inet(0x2, 0x8008000000003, 0x1) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 08:26:15 executing program 0: clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) clone(0x2502001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@multicast2, @in=@multicast2}, {}, {0x0, 0x1}}}, 0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 08:26:15 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) 08:26:15 executing program 2: clone(0x3103001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pause() r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score_adj\x00') exit(0x22d) sendfile(r0, r0, 0x0, 0xe9c) 08:26:15 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)) 08:26:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x12, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="056304400300000004630440000000000b63"], 0x0, 0x0, 0x0}) [ 199.997731] binder: 7626:7627 Acquire 1 refcount change on invalid ref 3 ret -22 [ 200.005397] binder: 7626:7627 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 200.040786] binder: 7626:7627 ERROR: BC_REGISTER_LOOPER called without request 08:26:16 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4) 08:26:16 executing program 0: [ 200.728262] hrtimer: interrupt took 33798 ns [ 200.894373] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 200.903610] openvswitch: netlink: Flow set message rejected, Key attribute missing. 08:26:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x4, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000280)={0x0, 0x4000000000088, 0x0, 0x40, &(0x7f0000ffa000/0x4000)=nil, 0x10e15}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x1000, 0x0, 'client0\x00', 0x0, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x0, 0x33093e40}) userfaultfd(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000440)={'syz1'}, 0x1200e) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close(0xffffffffffffffff) write(r2, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) dup2(r3, r3) 08:26:17 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4) 08:26:17 executing program 0: 08:26:17 executing program 2: 08:26:17 executing program 5: 08:26:17 executing program 4: 08:26:17 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x4, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000280)={0x0, 0x4000000000088, 0x0, 0x40, &(0x7f0000ffa000/0x4000)=nil, 0x10e15}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {}, 0x6}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x1000, 0x0, 'client0\x00', 0x0, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x0, 0x33093e40}) userfaultfd(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000440)={'syz1'}, 0x1200e) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r1, &(0x7f00000030c0), 0x1000) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x102d) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close(0xffffffffffffffff) write(r2, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) dup2(r3, r3) 08:26:17 executing program 0: 08:26:17 executing program 5: 08:26:17 executing program 2: 08:26:17 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4) 08:26:17 executing program 5: 08:26:17 executing program 3: 08:26:17 executing program 2: 08:26:17 executing program 0: 08:26:17 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4) 08:26:17 executing program 5: 08:26:17 executing program 4: 08:26:17 executing program 5: 08:26:17 executing program 2: 08:26:17 executing program 0: 08:26:17 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4) 08:26:17 executing program 4: 08:26:17 executing program 3: 08:26:17 executing program 4: 08:26:17 executing program 2: 08:26:17 executing program 3: 08:26:17 executing program 0: 08:26:17 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4) 08:26:17 executing program 5: 08:26:17 executing program 2: 08:26:17 executing program 5: 08:26:17 executing program 4: 08:26:17 executing program 0: 08:26:17 executing program 3: 08:26:17 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x4) 08:26:18 executing program 2: 08:26:18 executing program 4: 08:26:18 executing program 5: 08:26:18 executing program 2: 08:26:18 executing program 0: 08:26:18 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x4) 08:26:18 executing program 3: 08:26:18 executing program 5: 08:26:18 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7c}, [@ldst={0x7}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 08:26:18 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000012c0)=@flushpolicy={0x10, 0x1d, 0x725}, 0x10}}, 0x0) 08:26:18 executing program 0: 08:26:18 executing program 3: 08:26:18 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x4) 08:26:18 executing program 4: 08:26:18 executing program 5: 08:26:18 executing program 0: 08:26:18 executing program 3: 08:26:18 executing program 2: 08:26:18 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b54c007110000f30501000b000300000000000200cf", 0x1f) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x400804, 0x0) 08:26:18 executing program 1: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4) 08:26:18 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x80010, r0, 0x0) 08:26:18 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getresuid(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0xfffffffffffffffc, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{}, {0x20000000304, @link_local}, 0x4, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x01\x00\x00\x01\x00'}) 08:26:18 executing program 3: 08:26:18 executing program 2: [ 202.524965] capability: warning: `syz-executor5' uses 32-bit capabilities (legacy support in use) [ 202.561902] [ 202.563563] ====================================================== [ 202.569895] WARNING: possible circular locking dependency detected [ 202.576221] 4.20.0-rc6-next-20181217+ #172 Not tainted [ 202.581501] ------------------------------------------------------ [ 202.587829] syz-executor0/7844 is trying to acquire lock: [ 202.593396] 000000000a3385e7 (&tbl->lock){+.-.}, at: neigh_change_state+0x1dc/0x7a0 [ 202.601227] [ 202.601227] but task is already holding lock: [ 202.607209] 0000000087c77e5f (&n->lock){++--}, at: __neigh_update+0xe6/0x1eb0 [ 202.614507] [ 202.614507] which lock already depends on the new lock. [ 202.614507] [ 202.622830] [ 202.622830] the existing dependency chain (in reverse order) is: [ 202.630206] kobject: 'loop3' (00000000a921947f): kobject_uevent_env [ 202.630481] [ 202.630481] -> #1 (&n->lock){++--}: [ 202.637021] kobject: 'loop3' (00000000a921947f): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 202.642012] _raw_write_lock+0x2d/0x40 [ 202.642025] neigh_flush_dev+0x34f/0x960 [ 202.642036] neigh_changeaddr+0x31/0x40 [ 202.642056] ndisc_netdev_event+0xe6/0x5b0 [ 202.651968] kobject: 'loop1' (000000003bee77dc): kobject_uevent_env [ 202.655899] notifier_call_chain+0x17e/0x380 [ 202.655913] raw_notifier_call_chain+0x2d/0x40 [ 202.655927] call_netdevice_notifiers_info+0x3f/0x90 [ 202.655941] dev_set_mac_address+0x293/0x3b0 [ 202.655958] do_setlink+0x7c7/0x3f30 [ 202.660630] kobject: 'loop1' (000000003bee77dc): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 202.665024] __rtnl_newlink+0xcde/0x19e0 [ 202.665037] rtnl_newlink+0x6b/0xa0 [ 202.665048] rtnetlink_rcv_msg+0x46a/0xc20 [ 202.665067] netlink_rcv_skb+0x172/0x440 [ 202.718588] kobject: 'loop3' (00000000a921947f): kobject_uevent_env [ 202.719179] rtnetlink_rcv+0x1c/0x20 [ 202.719193] netlink_unicast+0x5a5/0x760 [ 202.719205] netlink_sendmsg+0xa18/0xfc0 [ 202.719224] sock_sendmsg+0xd5/0x120 [ 202.723988] kobject: 'loop3' (00000000a921947f): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 202.728546] ___sys_sendmsg+0x7fd/0x930 [ 202.728559] __sys_sendmsg+0x11d/0x280 [ 202.728572] __x64_sys_sendmsg+0x78/0xb0 [ 202.728592] do_syscall_64+0x1b9/0x820 [ 202.755821] kobject: 'loop2' (00000000e1a461c0): kobject_uevent_env [ 202.762034] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 202.762040] [ 202.762040] -> #0 (&tbl->lock){+.-.}: [ 202.762061] lock_acquire+0x1ed/0x520 [ 202.762079] _raw_write_lock_bh+0x31/0x40 [ 202.788076] kobject: 'loop2' (00000000e1a461c0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 202.792064] neigh_change_state+0x1dc/0x7a0 [ 202.792080] __neigh_update+0x478/0x1eb0 [ 202.792093] neigh_update+0x37/0x50 [ 202.792119] arp_req_set+0x54c/0xaa0 [ 202.833609] arp_ioctl+0x48b/0xae0 [ 202.837679] inet_ioctl+0x237/0x360 [ 202.841838] sock_do_ioctl+0xeb/0x420 [ 202.846194] sock_ioctl+0x313/0x690 [ 202.850356] do_vfs_ioctl+0x1de/0x1790 [ 202.854784] ksys_ioctl+0xa9/0xd0 [ 202.858777] __x64_sys_ioctl+0x73/0xb0 [ 202.863199] do_syscall_64+0x1b9/0x820 [ 202.867613] entry_SYSCALL_64_after_hwframe+0x49/0xbe 08:26:18 executing program 1: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4) 08:26:18 executing program 3: 08:26:18 executing program 3: 08:26:18 executing program 2: 08:26:18 executing program 3: 08:26:18 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/>ro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) [ 202.870810] kobject: 'loop2' (00000000e1a461c0): kobject_uevent_env [ 202.873328] [ 202.873328] other info that might help us debug this: [ 202.873328] [ 202.885435] kobject: 'loop2' (00000000e1a461c0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 202.887886] Possible unsafe locking scenario: [ 202.887886] [ 202.887890] CPU0 CPU1 [ 202.887894] ---- ---- [ 202.887896] lock(&n->lock); [ 202.887904] lock(&tbl->lock); [ 202.887912] lock(&n->lock); [ 202.887918] lock(&tbl->lock); [ 202.887926] [ 202.887926] *** DEADLOCK *** [ 202.887926] [ 202.887935] 2 locks held by syz-executor0/7844: [ 202.887938] #0: 00000000413b4e8c (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 202.934822] kobject: 'loop1' (000000003bee77dc): kobject_uevent_env [ 202.936632] #1: 0000000087c77e5f (&n->lock){++--}, at: __neigh_update+0xe6/0x1eb0 [ 202.936662] [ 202.936662] stack backtrace: [ 202.936677] CPU: 1 PID: 7844 Comm: syz-executor0 Not tainted 4.20.0-rc6-next-20181217+ #172 [ 202.936690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.941375] kobject: 'loop1' (000000003bee77dc): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 202.948621] Call Trace: [ 202.948638] dump_stack+0x244/0x39d [ 202.948653] ? dump_stack_print_info.cold.1+0x20/0x20 [ 202.948672] ? vprintk_func+0x85/0x181 [ 203.009745] print_circular_bug.isra.36.cold.58+0x1bd/0x27d [ 203.015449] ? save_trace+0xe0/0x290 [ 203.019201] __lock_acquire+0x3399/0x4c20 [ 203.023345] ? mark_held_locks+0x130/0x130 [ 203.027588] ? kasan_check_read+0x11/0x20 [ 203.031741] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 203.037011] ? arp_constructor+0x3a5/0xd80 [ 203.041245] ? lock_downgrade+0x900/0x900 [ 203.045386] ? check_preemption_disabled+0x48/0x280 [ 203.050393] ? mark_held_locks+0x130/0x130 [ 203.054628] ? mark_held_locks+0xc7/0x130 [ 203.058820] ? __local_bh_enable_ip+0x160/0x260 [ 203.063496] ? __local_bh_enable_ip+0x160/0x260 [ 203.068162] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 203.072757] ? trace_hardirqs_on+0xbd/0x310 [ 203.077075] ? _raw_write_unlock_bh+0x30/0x40 [ 203.081560] ? trace_hardirqs_off_caller+0x310/0x310 [ 203.086659] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 203.092187] ? ___neigh_create+0x1704/0x2630 [ 203.096587] ? ___neigh_create+0x1704/0x2630 [ 203.100987] lock_acquire+0x1ed/0x520 [ 203.104778] ? neigh_change_state+0x1dc/0x7a0 [ 203.109267] ? lock_release+0xa00/0xa00 [ 203.113250] _raw_write_lock_bh+0x31/0x40 [ 203.117400] ? neigh_change_state+0x1dc/0x7a0 [ 203.121889] neigh_change_state+0x1dc/0x7a0 [ 203.126204] ? neigh_parms_alloc+0x6d0/0x6d0 [ 203.130606] ? mark_held_locks+0xc7/0x130 [ 203.134756] ? kasan_check_write+0x14/0x20 [ 203.138992] ? do_raw_write_lock+0x14f/0x310 [ 203.143391] ? do_raw_read_unlock+0x70/0x70 [ 203.147705] ? neigh_lookup+0x586/0x7c0 [ 203.151687] ? trace_hardirqs_off_caller+0x310/0x310 [ 203.156790] __neigh_update+0x478/0x1eb0 [ 203.160856] ? __local_bh_enable_ip+0x160/0x260 [ 203.165524] ? arp_key_eq+0x10/0xa0 [ 203.169198] ? __neigh_notify+0x160/0x160 [ 203.173444] ? ip_route_output_key_hash_rcu+0x3490/0x3490 [ 203.178974] ? find_held_lock+0x36/0x1c0 [ 203.183028] neigh_update+0x37/0x50 [ 203.186660] arp_req_set+0x54c/0xaa0 [ 203.190375] ? arp_req_delete+0x870/0x870 [ 203.194526] ? apparmor_cred_prepare+0x5a0/0x5a0 [ 203.199289] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 203.204819] arp_ioctl+0x48b/0xae0 [ 203.208374] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 203.213554] ? arp_constructor+0xd80/0xd80 [ 203.217779] ? futex_wake+0x304/0x760 [ 203.221589] inet_ioctl+0x237/0x360 [ 203.225223] ? inet_stream_connect+0xa0/0xa0 [ 203.229623] ? mark_held_locks+0x130/0x130 [ 203.233871] ? graph_lock+0x270/0x270 [ 203.237674] ? do_futex+0x249/0x26d0 [ 203.241388] ? find_held_lock+0x36/0x1c0 [ 203.245442] sock_do_ioctl+0xeb/0x420 [ 203.249233] ? compat_ifr_data_ioctl+0x170/0x170 [ 203.253982] ? check_preemption_disabled+0x48/0x280 [ 203.258990] ? kasan_check_read+0x11/0x20 [ 203.263167] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 203.268436] ? rcu_read_unlock_special+0x370/0x370 [ 203.273359] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 203.278552] sock_ioctl+0x313/0x690 [ 203.282173] ? dlci_ioctl_set+0x40/0x40 [ 203.286140] ? ksys_dup3+0x680/0x680 [ 203.289872] ? __might_fault+0x12b/0x1e0 [ 203.293932] ? lock_downgrade+0x900/0x900 [ 203.298072] ? lock_release+0xa00/0xa00 [ 203.302041] ? perf_trace_sched_process_exec+0x860/0x860 [ 203.307481] ? dlci_ioctl_set+0x40/0x40 [ 203.311447] do_vfs_ioctl+0x1de/0x1790 [ 203.315328] ? ioctl_preallocate+0x300/0x300 [ 203.319738] ? __fget_light+0x2e9/0x430 [ 203.323716] ? fget_raw+0x20/0x20 [ 203.327162] ? _copy_to_user+0xc8/0x110 [ 203.331130] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 203.336671] ? put_timespec64+0x10f/0x1b0 [ 203.340813] ? nsecs_to_jiffies+0x30/0x30 [ 203.344954] ? do_syscall_64+0x9a/0x820 [ 203.348930] ? do_syscall_64+0x9a/0x820 [ 203.352901] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 203.357475] ? security_file_ioctl+0x94/0xc0 [ 203.361891] ksys_ioctl+0xa9/0xd0 [ 203.365338] __x64_sys_ioctl+0x73/0xb0 [ 203.369219] do_syscall_64+0x1b9/0x820 [ 203.373102] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 203.378458] ? syscall_return_slowpath+0x5e0/0x5e0 [ 203.383381] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 203.388219] ? trace_hardirqs_on_caller+0x310/0x310 [ 203.393227] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 203.398234] ? prepare_exit_to_usermode+0x291/0x3b0 [ 203.403245] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 203.408079] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 203.413262] RIP: 0033:0x457669 [ 203.416490] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 203.435397] RSP: 002b:00007f7da6892c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.443093] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669 [ 203.450354] RDX: 0000000020000180 RSI: 0000000000008955 RDI: 0000000000000003 [ 203.457633] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 203.464894] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7da68936d4 [ 203.472154] R13: 00000000004c2747 R14: 00000000004d46f8 R15: 00000000ffffffff [ 203.484323] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. [ 203.495807] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 203.504639] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. [ 203.514751] netlink: 'syz-executor4': attribute type 3 has an invalid length. 08:26:19 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/>ro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) 08:26:19 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1b) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x1b}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) 08:26:19 executing program 1: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4) 08:26:19 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x80010, r0, 0x0) 08:26:19 executing program 0: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x80010, r0, 0x0) [ 203.534186] kobject: 'loop5' (000000002c311e1f): kobject_uevent_env [ 203.543667] kobject: 'loop5' (000000002c311e1f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 203.558439] kobject: 'loop0' (00000000af56a4ff): kobject_uevent_env [ 203.564958] kobject: 'loop0' (00000000af56a4ff): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 203.601083] kobject: 'loop4' (00000000b6f9c5dc): kobject_uevent_env [ 203.635648] kobject: 'loop4' (00000000b6f9c5dc): fill_kobj_path: path = '/devices/virtual/block/loop4' 08:26:19 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b54c007110000f30501000b000300000000000200cf", 0x1f) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x400804, 0x0) 08:26:19 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x80010, r0, 0x0) 08:26:19 executing program 0: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x80010, r0, 0x0) 08:26:19 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4) 08:26:19 executing program 2: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x80010, r0, 0x0) [ 203.650385] kobject: 'loop2' (00000000e1a461c0): kobject_uevent_env [ 203.670595] kobject: 'loop2' (00000000e1a461c0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 203.685058] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. 08:26:19 executing program 3: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x80010, r0, 0x0) 08:26:19 executing program 2: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x80010, r0, 0x0) 08:26:19 executing program 3: 08:26:19 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x80010, r0, 0x0) [ 203.703684] kobject: 'loop1' (000000003bee77dc): kobject_uevent_env [ 203.731893] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 203.739524] kobject: 'loop1' (000000003bee77dc): fill_kobj_path: path = '/devices/virtual/block/loop1' 08:26:19 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4) 08:26:19 executing program 0: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x80010, r0, 0x0) 08:26:19 executing program 2: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x80010, r0, 0x0) [ 203.772796] kobject: 'loop3' (00000000a921947f): kobject_uevent_env [ 203.799535] kobject: 'loop3' (00000000a921947f): fill_kobj_path: path = '/devices/virtual/block/loop3' 08:26:19 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b54c007110000f30501000b000300000000000200cf", 0x1f) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x400804, 0x0) 08:26:19 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) 08:26:19 executing program 3: 08:26:19 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4) 08:26:19 executing program 0: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) [ 203.838990] kobject: 'loop5' (000000002c311e1f): kobject_uevent_env [ 203.845445] kobject: 'loop5' (000000002c311e1f): fill_kobj_path: path = '/devices/virtual/block/loop5' 08:26:19 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) pipe(&(0x7f0000000040)) 08:26:19 executing program 2: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) [ 203.886278] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. [ 203.889225] kobject: 'loop0' (00000000af56a4ff): kobject_uevent_env [ 203.909236] kobject: 'loop0' (00000000af56a4ff): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 203.918125] netlink: 'syz-executor4': attribute type 3 has an invalid length. 08:26:20 executing program 3: 08:26:20 executing program 0: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) pipe(&(0x7f0000000040)) [ 203.943185] kobject: 'loop5' (000000002c311e1f): kobject_uevent_env [ 203.954994] kobject: 'loop5' (000000002c311e1f): fill_kobj_path: path = '/devices/virtual/block/loop5' 08:26:20 executing program 3: 08:26:20 executing program 2: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) pipe(&(0x7f0000000040)) 08:26:20 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4) [ 203.984324] kobject: 'loop3' (00000000a921947f): kobject_uevent_env [ 203.992799] kobject: 'loop3' (00000000a921947f): fill_kobj_path: path = '/devices/virtual/block/loop3' 08:26:20 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b54c007110000f30501000b000300000000000200cf", 0x1f) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x400804, 0x0) 08:26:20 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4) 08:26:20 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) 08:26:20 executing program 0: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) 08:26:20 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0x20000000000000}) futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000200)={0x0, 0x9}) clock_gettime(0x7, &(0x7f0000000340)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) r2 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) rt_sigtimedwait(&(0x7f0000000180)={0x5}, &(0x7f0000000500), &(0x7f00000001c0)={0x0, 0x989680}, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x3, 0x7, 0x80000000, 0xffffffff}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8, 0x4002091, r2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000300)={0x3}, 0x0, 0x8) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) 08:26:20 executing program 2: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) [ 204.031750] kobject: 'loop1' (000000003bee77dc): kobject_uevent_env [ 204.039800] kobject: 'loop1' (000000003bee77dc): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 204.052967] kobject: 'loop0' (00000000af56a4ff): kobject_uevent_env [ 204.059554] kobject: 'loop0' (00000000af56a4ff): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 204.090294] kobject: 'loop5' (000000002c311e1f): kobject_uevent_env [ 204.102890] kobject: 'loop5' (000000002c311e1f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 204.116990] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. 08:26:20 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) get_robust_list(0x0, 0x0, 0x0) 08:26:20 executing program 0: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) 08:26:20 executing program 2: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) [ 204.136202] kobject: 'loop4' (00000000b6f9c5dc): kobject_uevent_env 08:26:20 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4) [ 204.170990] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 204.178176] kobject: 'loop4' (00000000b6f9c5dc): fill_kobj_path: path = '/devices/virtual/block/loop4' 08:26:20 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) get_robust_list(0x0, 0x0, 0x0) 08:26:20 executing program 2: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) [ 204.215673] kobject: 'loop3' (00000000a921947f): kobject_uevent_env [ 204.222122] kobject: 'loop3' (00000000a921947f): fill_kobj_path: path = '/devices/virtual/block/loop3' 08:26:20 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4) 08:26:20 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b54c007110000f30501000b000300000000000200cf", 0x1f) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) 08:26:20 executing program 0: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) 08:26:20 executing program 2: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) inotify_init1(0x0) [ 204.280175] kobject: 'loop0' (00000000af56a4ff): kobject_uevent_env [ 204.286997] kobject: 'loop0' (00000000af56a4ff): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 204.297336] kobject: 'loop5' (000000002c311e1f): kobject_uevent_env [ 204.304089] kobject: 'loop5' (000000002c311e1f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 204.316883] kobject: 'loop2' (00000000e1a461c0): kobject_uevent_env [ 204.349799] kobject: 'loop2' (00000000e1a461c0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 204.362130] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. [ 204.382656] kobject: 'loop3' (00000000a921947f): kobject_uevent_env [ 204.391929] netlink: 'syz-executor4': attribute type 3 has an invalid length. 08:26:20 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0x20000000000000}) futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000200)={0x0, 0x9}) clock_gettime(0x7, &(0x7f0000000340)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) r2 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) rt_sigtimedwait(&(0x7f0000000180)={0x5}, &(0x7f0000000500), &(0x7f00000001c0)={0x0, 0x989680}, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x3, 0x7, 0x80000000, 0xffffffff}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8, 0x4002091, r2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000300)={0x3}, 0x0, 0x8) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) 08:26:20 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) get_robust_list(0x0, 0x0, 0x0) 08:26:20 executing program 2: inotify_init1(0x0) 08:26:20 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4) 08:26:20 executing program 0: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) [ 204.403203] kobject: 'loop3' (00000000a921947f): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 204.426028] kobject: 'loop0' (00000000af56a4ff): kobject_uevent_env [ 204.432492] kobject: 'loop0' (00000000af56a4ff): fill_kobj_path: path = '/devices/virtual/block/loop0' 08:26:20 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0x20000000000000}) futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000200)={0x0, 0x9}) clock_gettime(0x7, &(0x7f0000000340)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) r2 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) rt_sigtimedwait(&(0x7f0000000180)={0x5}, &(0x7f0000000500), &(0x7f00000001c0)={0x0, 0x989680}, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x3, 0x7, 0x80000000, 0xffffffff}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8, 0x4002091, r2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000300)={0x3}, 0x0, 0x8) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) 08:26:20 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) 08:26:20 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) 08:26:20 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4) 08:26:20 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104fffffd3b54c007110000f30501000b000300000000000200cf", 0x1f) [ 204.474067] kobject: 'loop3' (00000000a921947f): kobject_uevent_env [ 204.502737] kobject: 'loop3' (00000000a921947f): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 204.515415] kobject: 'loop2' (00000000e1a461c0): kobject_uevent_env [ 204.522395] kobject: 'loop2' (00000000e1a461c0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 204.540276] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. 08:26:20 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) 08:26:20 executing program 0: inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) [ 204.565885] kobject: 'loop5' (000000002c311e1f): kobject_uevent_env [ 204.572358] kobject: 'loop5' (000000002c311e1f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 204.576547] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 204.603512] kobject: 'loop0' (00000000af56a4ff): kobject_uevent_env [ 204.611349] kobject: 'loop0' (00000000af56a4ff): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 204.621572] kobject: 'loop4' (00000000b6f9c5dc): kobject_uevent_env [ 204.635623] kobject: 'loop4' (00000000b6f9c5dc): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 204.648480] kobject: 'loop2' (00000000e1a461c0): kobject_uevent_env [ 204.654943] kobject: 'loop2' (00000000e1a461c0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 204.675992] kobject: 'loop3' (00000000a921947f): kobject_uevent_env [ 204.682455] kobject: 'loop3' (00000000a921947f): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 204.704758] kobject: 'loop5' (000000002c311e1f): kobject_uevent_env [ 204.728717] kobject: 'loop5' (000000002c311e1f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 204.741916] kobject: 'loop0' (00000000af56a4ff): kobject_uevent_env [ 204.748676] kobject: 'loop0' (00000000af56a4ff): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 204.758948] kobject: 'loop2' (00000000e1a461c0): kobject_uevent_env [ 204.765446] kobject: 'loop2' (00000000e1a461c0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 204.775610] kobject: 'loop1' (000000003bee77dc): kobject_uevent_env [ 204.782104] kobject: 'loop1' (000000003bee77dc): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 204.793503] kobject: 'loop5' (000000002c311e1f): kobject_uevent_env [ 204.800221] kobject: 'loop5' (000000002c311e1f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 204.810342] kobject: 'loop2' (00000000e1a461c0): kobject_uevent_env [ 204.817119] kobject: 'loop2' (00000000e1a461c0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 204.827221] kobject: 'loop0' (00000000af56a4ff): kobject_uevent_env [ 204.833716] kobject: 'loop0' (00000000af56a4ff): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 204.846230] kobject: 'loop1' (000000003bee77dc): kobject_uevent_env [ 204.853082] kobject: 'loop1' (000000003bee77dc): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 204.864129] kobject: 'loop2' (00000000e1a461c0): kobject_uevent_env [ 204.871228] kobject: 'loop2' (00000000e1a461c0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 204.882366] kobject: 'loop5' (000000002c311e1f): kobject_uevent_env [ 204.889638] kobject: 'loop5' (000000002c311e1f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 204.908454] kobject: 'loop4' (00000000b6f9c5dc): kobject_uevent_env [ 204.914922] kobject: 'loop4' (00000000b6f9c5dc): fill_kobj_path: path = '/devices/virtual/block/loop4' 08:26:21 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0x20000000000000}) futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000200)={0x0, 0x9}) clock_gettime(0x7, &(0x7f0000000340)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) r2 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) rt_sigtimedwait(&(0x7f0000000180)={0x5}, &(0x7f0000000500), &(0x7f00000001c0)={0x0, 0x989680}, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x3, 0x7, 0x80000000, 0xffffffff}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8, 0x4002091, r2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000300)={0x3}, 0x0, 0x8) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) 08:26:21 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4) 08:26:21 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0x20000000000000}) futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000200)={0x0, 0x9}) clock_gettime(0x7, &(0x7f0000000340)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) r2 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) rt_sigtimedwait(&(0x7f0000000180)={0x5}, &(0x7f0000000500), &(0x7f00000001c0)={0x0, 0x989680}, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x3, 0x7, 0x80000000, 0xffffffff}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8, 0x4002091, r2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000300)={0x3}, 0x0, 0x8) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) 08:26:21 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) 08:26:21 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) 08:26:21 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0x20000000000000}) futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000200)={0x0, 0x9}) clock_gettime(0x7, &(0x7f0000000340)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) r2 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) rt_sigtimedwait(&(0x7f0000000180)={0x5}, &(0x7f0000000500), &(0x7f00000001c0)={0x0, 0x989680}, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x3, 0x7, 0x80000000, 0xffffffff}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8, 0x4002091, r2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000300)={0x3}, 0x0, 0x8) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) [ 204.936401] kobject: 'loop1' (000000003bee77dc): kobject_uevent_env [ 204.942890] kobject: 'loop1' (000000003bee77dc): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 204.952831] kobject: 'loop0' (00000000af56a4ff): kobject_uevent_env [ 204.959371] kobject: 'loop0' (00000000af56a4ff): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 204.981331] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. 08:26:21 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r0, 0x0, 0x0) 08:26:21 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4) [ 205.013635] kobject: 'loop2' (00000000e1a461c0): kobject_uevent_env [ 205.028534] kobject: 'loop2' (00000000e1a461c0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 205.049944] kobject: 'loop2' (00000000e1a461c0): kobject_uevent_env 08:26:21 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) 08:26:21 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r0, 0x0, 0x0) 08:26:21 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4) [ 205.060940] kobject: 'loop2' (00000000e1a461c0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 205.109129] kobject: 'loop5' (000000002c311e1f): kobject_uevent_env [ 205.127273] kobject: 'loop5' (000000002c311e1f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 205.150175] kobject: 'loop0' (00000000af56a4ff): kobject_uevent_env 08:26:21 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4) [ 205.165239] kobject: 'loop0' (00000000af56a4ff): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 205.182639] kobject: 'loop1' (000000003bee77dc): kobject_uevent_env [ 205.189314] kobject: 'loop1' (000000003bee77dc): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 205.217047] kobject: 'loop4' (00000000b6f9c5dc): kobject_uevent_env [ 205.237467] kobject: 'loop4' (00000000b6f9c5dc): fill_kobj_path: path = '/devices/virtual/block/loop4' 08:26:21 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0x20000000000000}) futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000200)={0x0, 0x9}) clock_gettime(0x7, &(0x7f0000000340)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) r2 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) rt_sigtimedwait(&(0x7f0000000180)={0x5}, &(0x7f0000000500), &(0x7f00000001c0)={0x0, 0x989680}, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x3, 0x7, 0x80000000, 0xffffffff}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8, 0x4002091, r2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000300)={0x3}, 0x0, 0x8) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) 08:26:21 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r0, 0x0, 0x0) 08:26:21 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0x20000000000000}) futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000200)={0x0, 0x9}) clock_gettime(0x7, &(0x7f0000000340)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) r2 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) rt_sigtimedwait(&(0x7f0000000180)={0x5}, &(0x7f0000000500), &(0x7f00000001c0)={0x0, 0x989680}, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x3, 0x7, 0x80000000, 0xffffffff}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8, 0x4002091, r2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000300)={0x3}, 0x0, 0x8) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) 08:26:21 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4) 08:26:21 executing program 4: r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) 08:26:21 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0x20000000000000}) futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000200)={0x0, 0x9}) clock_gettime(0x7, &(0x7f0000000340)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) r2 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) rt_sigtimedwait(&(0x7f0000000180)={0x5}, &(0x7f0000000500), &(0x7f00000001c0)={0x0, 0x989680}, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x3, 0x7, 0x80000000, 0xffffffff}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8, 0x4002091, r2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000300)={0x3}, 0x0, 0x8) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) [ 205.262879] kobject: 'loop5' (000000002c311e1f): kobject_uevent_env [ 205.269588] kobject: 'loop5' (000000002c311e1f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 205.299948] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. [ 205.300680] kobject: 'loop0' (00000000af56a4ff): kobject_uevent_env 08:26:21 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4) 08:26:21 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) [ 205.325692] kobject: 'loop0' (00000000af56a4ff): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 205.336927] kobject: 'loop1' (000000003bee77dc): kobject_uevent_env [ 205.343703] kobject: 'loop1' (000000003bee77dc): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 205.354695] kobject: 'loop0' (00000000af56a4ff): kobject_uevent_env [ 205.362914] kobject: 'loop0' (00000000af56a4ff): fill_kobj_path: path = '/devices/virtual/block/loop0' 08:26:21 executing program 4: r0 = socket(0x0, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) 08:26:21 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) 08:26:21 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x4) [ 205.400569] kobject: 'loop4' (00000000b6f9c5dc): kobject_uevent_env [ 205.433984] kobject: 'loop4' (00000000b6f9c5dc): fill_kobj_path: path = '/devices/virtual/block/loop4' 08:26:21 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) [ 205.448137] kobject: 'loop2' (00000000e1a461c0): kobject_uevent_env [ 205.454832] kobject: 'loop2' (00000000e1a461c0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 205.467170] kobject: 'loop3' (00000000a921947f): kobject_uevent_env [ 205.477965] kobject: 'loop3' (00000000a921947f): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 205.531839] kobject: 'loop1' (000000003bee77dc): kobject_uevent_env [ 205.545253] kobject: 'loop1' (000000003bee77dc): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 205.570925] kobject: 'loop4' (00000000b6f9c5dc): kobject_uevent_env 08:26:21 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0x20000000000000}) futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000200)={0x0, 0x9}) clock_gettime(0x7, &(0x7f0000000340)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) r2 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) rt_sigtimedwait(&(0x7f0000000180)={0x5}, &(0x7f0000000500), &(0x7f00000001c0)={0x0, 0x989680}, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x3, 0x7, 0x80000000, 0xffffffff}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8, 0x4002091, r2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000300)={0x3}, 0x0, 0x8) 08:26:21 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0x20000000000000}) futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000200)={0x0, 0x9}) clock_gettime(0x7, &(0x7f0000000340)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) r2 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) rt_sigtimedwait(&(0x7f0000000180)={0x5}, &(0x7f0000000500), &(0x7f00000001c0)={0x0, 0x989680}, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x3, 0x7, 0x80000000, 0xffffffff}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8, 0x4002091, r2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000300)={0x3}, 0x0, 0x8) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) 08:26:21 executing program 4: r0 = socket(0x10, 0x0, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) 08:26:21 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x4) 08:26:21 executing program 5: capset(0x0, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) 08:26:21 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0x20000000000000}) futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000200)={0x0, 0x9}) clock_gettime(0x7, &(0x7f0000000340)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) r2 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) rt_sigtimedwait(&(0x7f0000000180)={0x5}, &(0x7f0000000500), &(0x7f00000001c0)={0x0, 0x989680}, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x3, 0x7, 0x80000000, 0xffffffff}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8, 0x4002091, r2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000300)={0x3}, 0x0, 0x8) [ 205.578544] kobject: 'loop4' (00000000b6f9c5dc): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 205.601294] kobject: 'loop1' (000000003bee77dc): kobject_uevent_env 08:26:21 executing program 4: r0 = socket(0x10, 0x4000000000000002, 0x0) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) 08:26:21 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x4) 08:26:21 executing program 5: capset(0x0, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) [ 205.632082] kobject: 'loop1' (000000003bee77dc): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 205.651408] kobject: 'loop0' (00000000af56a4ff): kobject_uevent_env [ 205.658451] kobject: 'loop0' (00000000af56a4ff): fill_kobj_path: path = '/devices/virtual/block/loop0' 08:26:21 executing program 4: r0 = socket(0x10, 0x4000000000000002, 0x0) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) 08:26:21 executing program 5: capset(0x0, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) 08:26:21 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4) [ 205.707502] kobject: 'loop1' (000000003bee77dc): kobject_uevent_env [ 205.726880] kobject: 'loop1' (000000003bee77dc): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 205.744102] kobject: 'loop4' (00000000b6f9c5dc): kobject_uevent_env [ 205.760629] kobject: 'loop4' (00000000b6f9c5dc): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 205.780379] kobject: 'loop2' (00000000e1a461c0): kobject_uevent_env [ 205.795611] kobject: 'loop2' (00000000e1a461c0): fill_kobj_path: path = '/devices/virtual/block/loop2' 08:26:21 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0x20000000000000}) futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000200)={0x0, 0x9}) clock_gettime(0x7, &(0x7f0000000340)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) r2 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) rt_sigtimedwait(&(0x7f0000000180)={0x5}, &(0x7f0000000500), &(0x7f00000001c0)={0x0, 0x989680}, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x3, 0x7, 0x80000000, 0xffffffff}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8, 0x4002091, r2, 0x0) [ 205.806157] kobject: 'loop3' (00000000a921947f): kobject_uevent_env [ 205.812606] kobject: 'loop3' (00000000a921947f): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 205.832807] kobject: 'loop1' (000000003bee77dc): kobject_uevent_env [ 205.839913] kobject: 'loop1' (000000003bee77dc): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 205.851123] kobject: 'loop4' (00000000b6f9c5dc): kobject_uevent_env [ 205.866278] kobject: 'loop4' (00000000b6f9c5dc): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 205.876503] kobject: 'loop5' (000000002c311e1f): kobject_uevent_env [ 205.883008] kobject: 'loop5' (000000002c311e1f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 205.893118] kobject: 'loop1' (000000003bee77dc): kobject_uevent_env [ 205.903035] kobject: 'loop1' (000000003bee77dc): fill_kobj_path: path = '/devices/virtual/block/loop1' 08:26:21 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0x20000000000000}) futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000200)={0x0, 0x9}) clock_gettime(0x7, &(0x7f0000000340)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) r2 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) rt_sigtimedwait(&(0x7f0000000180)={0x5}, &(0x7f0000000500), &(0x7f00000001c0)={0x0, 0x989680}, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x3, 0x7, 0x80000000, 0xffffffff}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8, 0x4002091, r2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000300)={0x3}, 0x0, 0x8) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) 08:26:21 executing program 4: r0 = socket(0x10, 0x4000000000000002, 0x0) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) 08:26:21 executing program 5: capset(&(0x7f0000000000), &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) 08:26:21 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0x20000000000000}) futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000200)={0x0, 0x9}) clock_gettime(0x7, &(0x7f0000000340)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) r2 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) rt_sigtimedwait(&(0x7f0000000180)={0x5}, &(0x7f0000000500), &(0x7f00000001c0)={0x0, 0x989680}, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x3, 0x7, 0x80000000, 0xffffffff}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8, 0x4002091, r2, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) 08:26:21 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4) [ 205.913121] kobject: 'loop5' (000000002c311e1f): kobject_uevent_env [ 205.919805] kobject: 'loop5' (000000002c311e1f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 205.930657] kobject: 'loop4' (00000000b6f9c5dc): kobject_uevent_env 08:26:22 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4) 08:26:22 executing program 5: capset(&(0x7f0000000000), &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) 08:26:22 executing program 4: socket(0x10, 0x4000000000000002, 0xc) write(0xffffffffffffffff, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) [ 205.962703] kobject: 'loop4' (00000000b6f9c5dc): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 205.989725] kobject: 'loop1' (000000003bee77dc): kobject_uevent_env 08:26:22 executing program 5: capset(&(0x7f0000000000), &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) [ 206.013029] kobject: 'loop1' (000000003bee77dc): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 206.048769] kobject: 'loop5' (000000002c311e1f): kobject_uevent_env 08:26:22 executing program 4: r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, 0x0, 0x0) 08:26:22 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) [ 206.059433] kobject: 'loop5' (000000002c311e1f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 206.076256] kobject: 'loop3' (00000000a921947f): kobject_uevent_env [ 206.083914] kobject: 'loop3' (00000000a921947f): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 206.112926] kobject: 'loop2' (00000000e1a461c0): kobject_uevent_env [ 206.126325] kobject: 'loop2' (00000000e1a461c0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 206.149394] kobject: 'loop4' (00000000b6f9c5dc): kobject_uevent_env 08:26:22 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0x20000000000000}) futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000200)={0x0, 0x9}) clock_gettime(0x7, &(0x7f0000000340)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0xfffffe38) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0) r1 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) rt_sigtimedwait(&(0x7f0000000180)={0x5}, &(0x7f0000000500), &(0x7f00000001c0)={0x0, 0x989680}, 0x8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8, 0x4002091, r1, 0x0) 08:26:22 executing program 5: capset(&(0x7f0000000000)={0x19980330}, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) 08:26:22 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) 08:26:22 executing program 4: r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, 0x0, 0x0) [ 206.159667] kobject: 'loop4' (00000000b6f9c5dc): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 206.169811] kobject: 'loop1' (000000003bee77dc): kobject_uevent_env [ 206.176783] kobject: 'loop1' (000000003bee77dc): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 206.200404] kobject: 'loop5' (000000002c311e1f): kobject_uevent_env 08:26:22 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0x20000000000000}) futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000200)={0x0, 0x9}) clock_gettime(0x7, &(0x7f0000000340)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) rt_sigtimedwait(&(0x7f0000000180)={0x5}, &(0x7f0000000500), &(0x7f00000001c0)={0x0, 0x989680}, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x3, 0x7, 0x80000000, 0xffffffff}) rt_sigprocmask(0x0, &(0x7f0000000300)={0x3}, 0x0, 0x8) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) 08:26:22 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0x20000000000000}) futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000200)={0x0, 0x9}) clock_gettime(0x7, &(0x7f0000000340)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) r2 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) rt_sigtimedwait(&(0x7f0000000180)={0x5}, &(0x7f0000000500), &(0x7f00000001c0)={0x0, 0x989680}, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x3, 0x7, 0x80000000, 0xffffffff}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8, 0x4002091, r2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000300)={0x3}, 0x0, 0x8) 08:26:22 executing program 4: r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, 0x0, 0x0) 08:26:22 executing program 5: capset(&(0x7f0000000000)={0x19980330}, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) [ 206.225921] kobject: 'loop5' (000000002c311e1f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 206.237183] kobject: 'loop4' (00000000b6f9c5dc): kobject_uevent_env 08:26:22 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) [ 206.267230] kobject: 'loop4' (00000000b6f9c5dc): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 206.280953] kobject: 'loop5' (000000002c311e1f): kobject_uevent_env [ 206.287974] kobject: 'loop5' (000000002c311e1f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 206.298024] kobject: 'loop1' (000000003bee77dc): kobject_uevent_env 08:26:22 executing program 4: r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000080), 0x0) 08:26:22 executing program 5: capset(&(0x7f0000000000)={0x19980330}, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) [ 206.316634] kobject: 'loop1' (000000003bee77dc): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 206.329460] kobject: 'loop4' (00000000b6f9c5dc): kobject_uevent_env 08:26:22 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) [ 206.360373] kobject: 'loop4' (00000000b6f9c5dc): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 206.396423] kobject: 'loop5' (000000002c311e1f): kobject_uevent_env [ 206.407350] kobject: 'loop5' (000000002c311e1f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 206.417516] kobject: 'loop3' (00000000a921947f): kobject_uevent_env [ 206.424091] kobject: 'loop3' (00000000a921947f): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 206.438616] kobject: 'loop2' (00000000e1a461c0): kobject_uevent_env [ 206.447881] kobject: 'loop2' (00000000e1a461c0): fill_kobj_path: path = '/devices/virtual/block/loop2' 08:26:22 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0x20000000000000}) futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000200)={0x0, 0x9}) clock_gettime(0x7, &(0x7f0000000340)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0xfffffe38) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0) r1 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8, 0x4002091, r1, 0x0) [ 206.458334] kobject: 'loop1' (000000003bee77dc): kobject_uevent_env [ 206.465182] kobject: 'loop1' (000000003bee77dc): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 206.476137] kobject: 'loop0' (00000000af56a4ff): kobject_uevent_env [ 206.482691] kobject: 'loop0' (00000000af56a4ff): fill_kobj_path: path = '/devices/virtual/block/loop0' 08:26:22 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0x20000000000000}) futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000200)={0x0, 0x9}) clock_gettime(0x7, &(0x7f0000000340)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) r2 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) rt_sigtimedwait(&(0x7f0000000180)={0x5}, &(0x7f0000000500), &(0x7f00000001c0)={0x0, 0x989680}, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x3, 0x7, 0x80000000, 0xffffffff}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8, 0x4002091, r2, 0x0) 08:26:22 executing program 4: r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000080), 0x0) 08:26:22 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x0, 0x7fffc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff028}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000004500), 0x3fffe65, 0x0) 08:26:22 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0x20000000000000}) futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000200)={0x0, 0x9}) clock_gettime(0x7, &(0x7f0000000340)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) rt_sigtimedwait(&(0x7f0000000180)={0x5}, &(0x7f0000000500), &(0x7f00000001c0)={0x0, 0x989680}, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x3, 0x7, 0x80000000, 0xffffffff}) rt_sigprocmask(0x0, &(0x7f0000000300)={0x3}, 0x0, 0x8) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) 08:26:22 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) [ 206.505894] kobject: 'loop1' (000000003bee77dc): kobject_uevent_env [ 206.512371] kobject: 'loop1' (000000003bee77dc): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 206.549708] kobject: 'loop4' (00000000b6f9c5dc): kobject_uevent_env 08:26:22 executing program 4: r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000080), 0x0) 08:26:22 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) [ 206.557327] kobject: 'loop4' (00000000b6f9c5dc): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 206.577249] kobject: 'loop4' (00000000b6f9c5dc): kobject_uevent_env [ 206.584728] kobject: 'loop4' (00000000b6f9c5dc): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 206.595224] kobject: 'loop1' (000000003bee77dc): kobject_uevent_env 08:26:22 executing program 4: r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000", 0x10) [ 206.612326] kobject: 'loop1' (000000003bee77dc): fill_kobj_path: path = '/devices/virtual/block/loop1' 08:26:22 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) [ 206.655181] kobject: 'loop4' (00000000b6f9c5dc): kobject_uevent_env [ 206.666709] kobject: 'loop4' (00000000b6f9c5dc): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 206.677901] kobject: 'loop3' (00000000a921947f): kobject_uevent_env [ 206.684542] kobject: 'loop3' (00000000a921947f): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 206.695677] kobject: 'loop0' (00000000af56a4ff): kobject_uevent_env 08:26:22 executing program 4: r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000", 0x10) [ 206.702346] kobject: 'loop0' (00000000af56a4ff): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 206.719323] kobject: 'loop2' (00000000e1a461c0): kobject_uevent_env [ 206.726393] kobject: 'loop2' (00000000e1a461c0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 206.736983] kobject: 'loop4' (00000000b6f9c5dc): kobject_uevent_env [ 206.743634] kobject: 'loop4' (00000000b6f9c5dc): fill_kobj_path: path = '/devices/virtual/block/loop4' 08:26:22 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0x20000000000000}) futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000200)={0x0, 0x9}) clock_gettime(0x7, &(0x7f0000000340)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) rt_sigtimedwait(&(0x7f0000000180)={0x5}, &(0x7f0000000500), &(0x7f00000001c0)={0x0, 0x989680}, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x3, 0x7, 0x80000000, 0xffffffff}) [ 206.765185] kobject: 'loop1' (000000003bee77dc): kobject_uevent_env [ 206.790996] kobject: 'loop1' (000000003bee77dc): fill_kobj_path: path = '/devices/virtual/block/loop1' 08:26:22 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0x20000000000000}) futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000200)={0x0, 0x9}) clock_gettime(0x7, &(0x7f0000000340)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0xfffffe38) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8, 0x4002091, 0xffffffffffffffff, 0x0) 08:26:22 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) 08:26:22 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0x20000000000000}) futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000200)={0x0, 0x9}) clock_gettime(0x7, &(0x7f0000000340)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) rt_sigtimedwait(&(0x7f0000000180)={0x5}, &(0x7f0000000500), &(0x7f00000001c0)={0x0, 0x989680}, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x3, 0x7, 0x80000000, 0xffffffff}) rt_sigprocmask(0x0, &(0x7f0000000300)={0x3}, 0x0, 0x8) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) [ 206.826374] kobject: 'loop4' (00000000b6f9c5dc): kobject_uevent_env [ 206.837707] kobject: 'loop4' (00000000b6f9c5dc): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 206.851986] kobject: 'loop4' (00000000b6f9c5dc): kobject_uevent_env [ 206.858641] kobject: 'loop4' (00000000b6f9c5dc): fill_kobj_path: path = '/devices/virtual/block/loop4' 08:26:22 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x0, 0x7fffc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff028}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000004500), 0x3fffe65, 0x0) 08:26:22 executing program 4: r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000", 0x10) 08:26:22 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r1, 0x0, 0x0) [ 206.885092] kobject: 'loop1' (000000003bee77dc): kobject_uevent_env [ 206.897075] kobject: 'loop1' (000000003bee77dc): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 206.922255] kobject: 'loop0' (00000000af56a4ff): kobject_uevent_env 08:26:23 executing program 4: r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) [ 206.943048] kobject: 'loop0' (00000000af56a4ff): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 206.966409] kobject: 'loop2' (00000000e1a461c0): kobject_uevent_env [ 206.979299] kobject: 'loop2' (00000000e1a461c0): fill_kobj_path: path = '/devices/virtual/block/loop2' 08:26:23 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, 0x0) get_robust_list(0x0, 0x0, 0x0) [ 206.992695] kobject: 'loop4' (00000000b6f9c5dc): kobject_uevent_env [ 207.009561] kobject: 'loop4' (00000000b6f9c5dc): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 207.031461] kobject: 'loop5' (000000002c311e1f): kobject_uevent_env 08:26:23 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, 0x0) get_robust_list(0x0, 0x0, 0x0) 08:26:23 executing program 4: r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) [ 207.042959] kobject: 'loop5' (000000002c311e1f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 207.061713] kobject: 'loop4' (00000000b6f9c5dc): kobject_uevent_env [ 207.074310] kobject: 'loop4' (00000000b6f9c5dc): fill_kobj_path: path = '/devices/virtual/block/loop4' 08:26:23 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, 0x0) get_robust_list(0x0, 0x0, 0x0) [ 207.095130] kobject: 'loop5' (000000002c311e1f): kobject_uevent_env [ 207.114636] kobject: 'loop5' (000000002c311e1f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 207.157140] kobject: 'loop4' (00000000b6f9c5dc): kobject_uevent_env [ 207.163586] kobject: 'loop4' (00000000b6f9c5dc): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 207.191727] kobject: 'loop5' (000000002c311e1f): kobject_uevent_env [ 207.208428] kobject: 'loop5' (000000002c311e1f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 207.227954] kobject: 'loop0' (00000000af56a4ff): kobject_uevent_env [ 207.241881] kobject: 'loop0' (00000000af56a4ff): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 207.262243] kobject: 'loop2' (00000000e1a461c0): kobject_uevent_env [ 207.274458] kobject: 'loop2' (00000000e1a461c0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 207.291138] kobject: 'loop4' (00000000b6f9c5dc): kobject_uevent_env [ 207.302201] kobject: 'loop4' (00000000b6f9c5dc): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 207.318900] kobject: 'loop1' (000000003bee77dc): kobject_uevent_env [ 207.329958] kobject: 'loop1' (000000003bee77dc): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 207.346643] kobject: 'loop5' (000000002c311e1f): kobject_uevent_env [ 207.357562] kobject: 'loop5' (000000002c311e1f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 207.376317] kobject: 'loop4' (00000000b6f9c5dc): kobject_uevent_env [ 207.388447] kobject: 'loop4' (00000000b6f9c5dc): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 207.414381] kobject: 'loop5' (000000002c311e1f): kobject_uevent_env [ 207.426531] kobject: 'loop5' (000000002c311e1f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 207.443189] kobject: 'loop4' (00000000b6f9c5dc): kobject_uevent_env [ 207.454348] kobject: 'loop4' (00000000b6f9c5dc): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 207.471066] kobject: 'loop5' (000000002c311e1f): kobject_uevent_env [ 207.477873] kobject: 'loop5' (000000002c311e1f): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 207.499141] kobject: 'loop4' (00000000b6f9c5dc): kobject_uevent_env [ 207.510234] kobject: 'loop4' (00000000b6f9c5dc): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 207.520424] kobject: 'loop5' (000000002c311e1f): kobject_uevent_env [ 207.527223] kobject: 'loop5' (000000002c311e1f): fill_kobj_path: path = '/devices/virtual/block/loop5' 08:26:24 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0x20000000000000}) futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000200)={0x0, 0x9}) clock_gettime(0x7, &(0x7f0000000340)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) rt_sigtimedwait(&(0x7f0000000180)={0x5}, &(0x7f0000000500), &(0x7f00000001c0)={0x0, 0x989680}, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x3, 0x7, 0x80000000, 0xffffffff}) 08:26:24 executing program 4: r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100", 0x18) 08:26:24 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) get_robust_list(0x0, 0x0, 0x0) 08:26:24 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x0, 0x7fffc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff028}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000004500), 0x3fffe65, 0x0) 08:26:24 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0x20000000000000}) futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000200)={0x0, 0x9}) clock_gettime(0x7, &(0x7f0000000340)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0xfffffe38) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0) r1 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) rt_sigtimedwait(&(0x7f0000000180)={0x5}, &(0x7f0000000500), &(0x7f00000001c0)={0x0, 0x989680}, 0x8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8, 0x4002091, r1, 0x0) rt_sigprocmask(0x0, &(0x7f0000000300)={0x3}, 0x0, 0x8) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) 08:26:24 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0x20000000000000}) futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000200)={0x0, 0x9}) clock_gettime(0x7, &(0x7f0000000340)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0xfffffe38) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8, 0x4002091, r1, 0x0) 08:26:24 executing program 4: r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dc", 0x1c) 08:26:24 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) get_robust_list(0x0, 0x0, 0x0) 08:26:24 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x0, 0x0) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM', 0x20000000000000}) futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0x